Online Certificate Enrollment

Online certificate enrollment works as follows:

Note: The ERX router must have a root CA certificate for the specified CA before online certificate enrollment.

The router uses SCEP and HTTP to enroll with the specified CA and retrieve the certificate that the router uses in IKE negotiations.